$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: sfWx3AVw6i688vzFGiZQ8uibd3YaMeQipsQtYFPx0eg= Subject key identifier: 05:38:A5:D2:E5:6B:0B:2D:0D:F7:4F:F8:54:02:D5:84:93:E0:96:27 Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 1C8D9723CC7498A8550689C81DE126A89C8161D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 01DF Signing time: Tue 28 Oct 2025 14:11:16 +0000 Manifest this update: Tue 28 Oct 2025 14:06:16 +0000 Manifest next update: Fri 31 Oct 2025 17:42:16 +0000 Files and hashes: 1: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=) 2: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=) 3: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: Y2XEiNPYWvJotGB6gfNkSJQPwj1ahLpSvt6rhGyYskg=) 4: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8d:97:23:cc:74:98:a8:55:06:89:c8:1d:e1:26:a8:9c:81:61:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Oct 28 14:06:16 2025 GMT Not After : Oct 31 17:42:16 2025 GMT Subject: CN=0538A5D2E56B0B2D0DF74FF85402D58493E09627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:4a:56:68:cd:76:d0:10:0e:0b:d2:38:32: 50:c4:6a:a9:78:e5:74:77:f4:49:25:8a:a7:9a:99: 27:35:72:88:0a:39:60:22:2d:22:13:e6:22:4d:7b: d5:2b:10:36:d3:6d:58:bb:6f:0e:d3:f5:3c:61:5f: c9:af:b3:f2:c1:79:08:c0:29:45:24:16:0c:1e:a4: 25:00:d1:19:19:d6:44:d5:67:3a:0c:3a:54:0e:6b: 49:a0:61:38:c8:f0:bc:71:51:63:83:93:4a:54:76: b3:31:b3:ac:b5:ab:34:57:45:5e:83:56:95:c8:c2: cd:f2:a4:42:6a:09:bc:d1:8e:21:de:81:e3:82:a8: 70:55:7d:79:42:54:de:74:4c:d1:ac:66:47:65:28: 3a:d1:da:49:55:70:22:1d:02:f1:6d:4e:6f:27:20: 89:c1:eb:bf:54:67:28:33:7c:d4:14:ca:ad:a7:64: a2:80:b0:80:c1:79:81:b6:5d:30:87:04:9c:31:2d: b2:fa:41:3c:be:8b:95:43:91:f9:b6:58:84:22:8a: ae:cc:92:3c:b6:cd:ae:81:cf:1f:8e:35:a4:6b:63: 70:06:90:1b:59:a1:87:46:a0:33:7b:8c:c2:94:a9: eb:60:31:a5:14:60:56:38:ab:1d:db:15:4a:6f:38: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:38:A5:D2:E5:6B:0B:2D:0D:F7:4F:F8:54:02:D5:84:93:E0:96:27 X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ac:ba:21:2f:9b:2a:45:1e:12:e2:2f:7b:7e:a7:0b:91:2c: a1:24:a4:13:2c:d1:d8:08:a6:7d:b4:1f:d7:fe:c5:02:86:af: 84:82:8f:96:45:71:d8:88:80:0d:92:0b:b2:44:70:e0:2c:9c: 65:e2:e7:52:81:d3:9d:8e:45:14:c1:0f:89:1b:30:ad:f0:8a: 31:2b:e4:06:41:81:55:61:9a:88:5e:42:9f:be:7c:72:94:28: 95:8d:25:41:32:b1:79:84:fd:84:bb:d7:e2:70:5b:94:84:a1: 7a:58:be:73:1b:4a:ef:92:12:45:0b:5c:12:b1:a8:82:5c:ed: a5:a3:f7:c6:db:76:f8:73:3b:c1:21:59:f5:7f:9a:07:98:74: 6a:2d:d4:32:b2:f7:ce:fb:da:da:f2:41:ac:ff:1e:a2:e6:fb: 4e:ba:8b:7e:e5:8c:f3:02:a3:74:d3:d0:1b:de:f0:f5:fb:9c: ee:d5:ca:4e:22:b2:56:db:de:89:19:44:86:9e:43:0f:77:f9: c2:dc:b0:b6:f7:02:6a:b7:69:70:7e:eb:c3:3d:ee:92:70:c0: fd:cb:68:e4:72:f3:e8:bc:16:4b:3f:55:7e:31:5b:d0:d8:59: 32:1a:1c:33:47:ad:f4:cc:5a:81:eb:64:b0:cd:ca:16:3e:0a: a4:4a:5d:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHI2XI8x0mKhVBonIHeEmqJyBYdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTEwMjgxNDA2MTZaFw0yNTEwMzExNzQyMTZaMDMxMTAvBgNV BAMTKDA1MzhBNUQyRTU2QjBCMkQwREY3NEZGODU0MDJENTg0OTNFMDk2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFG0pWaM120BAOC9I4MlDEaql4 5XR39EkliqeamSc1cogKOWAiLSIT5iJNe9UrEDbTbVi7bw7T9TxhX8mvs/LBeQjA KUUkFgwepCUA0RkZ1kTVZzoMOlQOa0mgYTjI8LxxUWODk0pUdrMxs6y1qzRXRV6D VpXIws3ypEJqCbzRjiHegeOCqHBVfXlCVN50TNGsZkdlKDrR2klVcCIdAvFtTm8n IInB679UZygzfNQUyq2nZKKAsIDBeYG2XTCHBJwxLbL6QTy+i5VDkfm2WIQiiq7M kjy2za6Bzx+ONaRrY3AGkBtZoYdGoDN7jMKUqetgMaUUYFY4qx3bFUpvOC/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBTil0uVrCy0N90/4VALVhJPglicwHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqsuiEvmypFHhLiL3t+pwuRLKEkpBMs0dgI pn20H9f+xQKGr4SCj5ZFcdiIgA2SC7JEcOAsnGXi51KB052ORRTBD4kbMK3wijEr 5AZBgVVhmoheQp++fHKUKJWNJUEysXmE/YS71+JwW5SEoXpYvnMbSu+SEkULXBKx qIJc7aWj98bbdvhzO8EhWfV/mgeYdGot1DKy98772tryQaz/HqLm+066i37ljPMC o3TT0Bve8PX7nO7Vyk4islbb3okZRIaeQw93+cLcsLb3Amq3aXB+68M97pJwwP3L aORy8+i8Fks/VX4xW9DYWTIaHDNHrfTMWoHrZLDNyhY+CqRKXU0= -----END CERTIFICATE-----Generated at Thu Oct 30 15:11:33 2025 by rpki-client